56 |
|
|
57 |
One-time signatures were originally proposed independently |
One-time signatures were originally proposed independently |
58 |
by [rabin78digitalized]_ and [lamport79constructing]_. Since then, numerous variations |
by [rabin78digitalized]_ and [lamport79constructing]_. Since then, numerous variations |
59 |
and improvements have been published [XXX]. |
and improvements have been published |
60 |
|
[merkle80protocols-andalso-merkle87digital-andalso-bleichenbacheroptimal-andalso-perrig01biba-andalso-reyzin02better]_. |
61 |
Despite their limitations, one-way signatures have |
Despite their limitations, one-way signatures have |
62 |
attracted considerable interest because |
attracted considerable interest because |
63 |
their operation |
their operation |
69 |
|
|
70 |
This is important for, e.g., long-term digital publishing |
This is important for, e.g., long-term digital publishing |
71 |
where the usual recommended digital signature expiration |
where the usual recommended digital signature expiration |
72 |
time of two years[XXX] is inconvenient. |
time of two years[XXX] is inconvenient [anderson98eternal]_. |
73 |
|
|
74 |
|
|
75 |
In this article, we introduce a new signature scheme, |
In this article, we introduce a new signature scheme, |
89 |
One-time Signatures |
One-time Signatures |
90 |
=================== |
=================== |
91 |
|
|
92 |
One-time signature schemes [XXX] are based |
One-time signature schemes are based |
93 |
on one-way functions, i.e., functions `$y=f(x)$` such |
on one-way functions, i.e., functions `$y=f(x)$` such |
94 |
as block ciphers or cryptographic hashes so that |
as block ciphers or cryptographic hashes so that |
95 |
that given `$y$` it is infeasible to find `$x$`. |
that given `$y$` it is infeasible to find `$x$`. |